fix a crash if blk_alloc_disk fails
CVE-2024-50277

4.7MEDIUM

Key Information:

Vendor

Linux
Status
Linux
Vendor
CVE Published:
19 November 2024

What is CVE-2024-50277?

In the Linux kernel, the following vulnerability has been resolved:

dm: fix a crash if blk_alloc_disk fails

If blk_alloc_disk fails, the variable md->disk is set to an error value. cleanup_mapped_device will see that md->disk is non-NULL and it will attempt to access it, causing a crash on this statement "md->disk->private_data = NULL;".

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Linux 74fa8f9c553f7b5ccab7d103acae63cc2e080465

Linux 74fa8f9c553f7b5ccab7d103acae63cc2e080465

Linux 6.9

References

https://git.kernel.org/stable/c/d7aec2a06730b774a97caaf48...
https://git.kernel.org/stable/c/fed13a5478680614ba97fc87e...

CVSS V3.1

Score:
4.7
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

JSON
.